Enabling an SIEM Server

To enable an SIEM Security Incident and Event Management (SIEM) is a server where Aruba IDPS sends the threat data to perform advanced analysis and generate reports. SIEM provides a holistic picture of the security posture by aggregating and correlating data from disparate sources in the network. server for IDPS Intrusion Detection and Prevention System (IDPS) monitors, detects, and prevents threats in the inbound and outbound traffic. Aruba IDPS provides an extra layer of protection that actively analyzes the network and takes actions on the traffic flows based on the defined rules. It inspects data packets, and if any threat is identified, acts real-time to prevent it., complete the following steps:

1. In the WebUI, set the filter to Global.
   The dashboard context for all devices is displayed.
2. Under Manage, click Security > Gateway IDS/IPS.
3. Click the Config icon to open the Gateway IDS/IPS configuration page.
4. Click the SIEM tab.
5. Select the Enable reporting of threats to SIEM systems check box.
6. Click Save.